3 ms·
Passwordless authentication seems like a good alternative: https://hacks.mozilla.org/2014/10/passwordless-authentication-secure-simple-and-fast-to-deploy/ https
by SimeVidas 11y ago
Passwordless authentication seems like a good alternative: https://hacks.mozilla.org/2014/10/passwordless-authentication-secure-simple-and-fast-to-deploy/ https://hacks.mozilla.org/2014/10/passwordless-authenticatio.... I’m planning it as a replacement for Persona. (Currently waiting for my host, Modulus, to add support for Let’s Encrypt.)
- iheartmemcache 11y agohttps://www.sslforfree.com/ https://www.sslforfree.com/ Use this and you don't need to have any server alteration. (You authenticate via uploading a FTP file to your site, then SFF.com queries to see if you placed it there, if it exists, you get a cert and install it like you would had you bought it from Verisign.)
- dordoka 11y agoSorry if this is off topic, but I have just tried sslforfree. You let it upload via FTP (or FTPS/SFTP) but the query to check if the file is there is done via HTTP. Why not just validate that the domain is mine if the FTP upload is successful? Or maybe even just redownload the file to see if contents match. I don't get it.
- mahouse 11y agoIt's not the same, you could tell it to upload the file to a folder that is not inside your domain.
- lucaspiller 11y agoI've been thinking about passwordless authentication too. Are there any big services already using it?